Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa
File: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (raw, json)
Hash identifier: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=
Subject key identifier: 26:18:ED:0D:E2:B0:58:3D:6D:ED:6F:61:A4:A8:C0:29:99:E8:31:8F
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 019426D9A2CA26DF09F4779492D1828C3BB8
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa
Signing time: Thu 02 Jan 2025 11:49:44 +0000
ROA not before: Thu 02 Jan 2025 11:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198551
IP address blocks: 185.200.144.0/22 maxlen: 22
185.200.144.0/24 maxlen: 24
185.200.145.0/24 maxlen: 24
185.200.146.0/24 maxlen: 24
185.200.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:a2:ca:26:df:09:f4:77:94:92:d1:82:8c:3b:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Jan 2 11:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2618ed0de2b0583d6ded6f61a4a8c02999e8318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:96:2a:c4:0b:ce:9b:f7:e4:c3:b3:35:31:
2c:57:4f:d4:73:3b:43:e9:50:42:44:d9:5c:f9:79:
74:b8:bd:ee:49:1b:d6:19:87:ce:1e:dc:1d:72:13:
41:ba:0c:a9:6a:12:02:f0:f2:5f:2d:91:b1:6f:ea:
b5:9b:3c:f5:3c:89:89:ac:28:a3:cb:a1:f0:51:71:
ec:72:7f:03:79:db:1e:9b:82:ff:1e:e9:aa:46:64:
61:af:a5:bb:9c:c4:ee:9e:2b:45:a7:fa:ea:72:7b:
01:5c:9f:43:4e:16:e9:a3:37:cf:34:09:b2:ff:ea:
4a:70:1a:b8:fa:9b:34:55:e4:8f:e7:2f:3f:e0:1a:
46:d6:46:40:45:60:9b:bd:c4:88:9d:54:9d:5a:be:
4d:c2:89:d5:4d:39:ea:67:38:5f:8b:94:88:f7:f7:
11:52:8a:fd:be:94:2e:25:b7:f4:b4:c9:23:c7:5c:
97:cd:a2:4f:33:64:24:01:2c:ac:e3:a8:ca:e3:6f:
b0:b0:17:b0:9f:03:28:af:7e:c4:14:e9:be:45:cb:
df:e9:bb:01:84:f5:c5:1f:6f:06:f6:d6:e5:84:e4:
5a:3e:50:5d:57:8d:f3:c3:66:f9:73:47:86:5e:5c:
71:11:5f:16:f8:bf:a1:7e:d6:f9:e9:76:60:2f:0f:
85:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:18:ED:0D:E2:B0:58:3D:6D:ED:6F:61:A4:A8:C0:29:99:E8:31:8F
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.144.0/22
Signature Algorithm: sha256WithRSAEncryption
40:b1:ec:37:9f:17:d8:09:6e:8b:07:20:8a:04:38:ae:64:12:
43:9b:19:c7:3c:e1:5b:5d:ac:0c:bc:13:b9:de:ce:94:39:06:
13:9a:b3:95:a1:84:42:28:75:49:ee:24:f2:58:08:4d:ff:f2:
c6:66:8b:f1:77:43:99:32:fe:b0:40:1c:f4:b5:71:f5:9b:f0:
76:99:ce:29:d0:d3:06:fe:2b:5f:ab:48:d9:38:84:b1:13:78:
ba:9b:d3:69:1f:88:9b:90:8b:c7:d5:64:f9:7e:3d:33:a2:fd:
87:af:de:b4:c4:e2:fd:70:fc:49:c7:4c:06:0a:88:9f:8b:26:
4a:2d:bd:79:3c:95:36:d7:25:82:97:b6:e9:fa:83:e1:0f:b7:
19:cc:f7:7a:9d:56:5d:9d:03:2f:05:13:4b:2b:57:d2:c9:00:
31:33:c3:de:d3:65:7d:55:03:eb:4d:13:2a:e7:6d:d1:0d:54:
9b:fb:e2:35:93:d2:89:88:42:f0:81:68:2f:8f:1c:5f:bf:2b:
06:05:db:2e:70:17:12:56:8f:b9:8b:85:93:ac:8f:15:88:c8:
d3:48:52:b5:3d:46:3a:48:f3:07:7d:49:3e:47:e8:14:55:43:
29:06:53:34:3c:e8:06:d1:59:e0:d2:4f:9f:e8:c2:ad:cc:b3:
de:c2:c4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:06:39 2025 by rpki-client